High severity7.3NVD Advisory· Published Nov 9, 2026· Updated Nov 9, 2026
CVE-2026-124558
CVE-2026-124558
Description
A vulnerability has been found in DataLinkDC Dinky up to 1.2.5. The impacted element is the function SqlGateway.onOpen of the file SqlGateway.java of the component sql-gateway Endpoint. Such manipulation of the argument connectAddress leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The researcher claims to have submitted a GHSA on the repository of the project.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.2.5
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.